4121 matches found
CVE-2016-10824
CVE-2016-10824 affects cPanel prior to 55.9999.141. The vulnerability enables unauthenticated arbitrary code execution via DNS NS entry poisoning. Public details in the provided connected sources are limited to the affected version and impact; no root-cause specifics or remediation steps are desc...
CVE-2016-10825
cPanel before 55.9999.141 allows attackers to bypass a Security Policy by faking static documents (SEC-92). Affected product: cPanel; vulnerable version range is prior to 55.9999.141. No exploitation details or remediation steps are provided in the connected documents; monitoring for updates is a...
CVE-2016-10825
cPanel before 55.9999.141 allows attackers to bypass a Security Policy by faking static documents SEC-92...
CVE-2016-10827
CVE-2016-10827 : A stored XSS vulnerability in cPanel/WHM (Edit System Mail Preferences) affects versions before 55.9999.141. The issue is described as a self-stored cross-site scripting flaw that could be exploited through the affected mail preferences UI. Public references in the connected docu...
CVE-2016-10827
cPanel before 55.9999.141 allows self stored XSS in WHM Edit System Mail Preferences SEC-96...
CVE-2016-10828
CVE-2016-10828 affects cPanel prior to 55.9999.141. The issue is an unsafe @INC path that enables arbitrary code execution (root cause: unsafe library path resolution). Impact is high: attacker could execute code with low privileges over the network. References across sources confirm the same des...
CVE-2016-10828
cPanel before 55.9999.141 allows arbitrary code execution because of an unsafe @INC path SEC-97...
CVE-2016-10829
The vulnerability CVE-2016-10829 affects cPanel before 55.9999.141. A multipart form processing error (SEC-99) allows arbitrary file-read operations via the affected web interface. Root cause: improper handling of multipart form data enabling unauthorized file reads. Impact: confidentiality of fi...
CVE-2016-10829
cPanel before 55.9999.141 allows arbitrary file-read operations because of a multipart form processing error SEC-99...
CVE-2016-10830
CVE-2016-10830 affects cPanel prior to 55.9999.141. The vulnerability is an ACL bypass in AppConfig applications caused by misuse of magic_revision (SEC-100). This could allow an attacker to bypass access controls, exposing otherwise restricted AppConfig functionality. Exploitation details are no...
CVE-2016-10830
cPanel before 55.9999.141 allows ACL bypass for AppConfig applications via magicrevision SEC-100...
CVE-2016-10831
CVE-2016-10831 affects cPanel before 55.9999.141. The issue is an authentication flaw where possessing another account does not trigger a two-factor authentication check (SEC-101). The vulnerability is described across multiple sources as an authorization/authentication issue in these versions. I...
CVE-2016-10831
cPanel before 55.9999.141 does not perform as two-factor authentication check when possessing another account SEC-101...
CVE-2018-20953
CVE-2018-20953 affects cPanel before 68.0.27, enabling self-XSS in the WHM listips interface due to insufficient input validation. Impact is client-side code execution in the victim’s browser when interacting with the interface. The vulnerability is documented across multiple sources (NVD/Red Hat...
CVE-2018-20953
cPanel before 68.0.27 allows self XSS in the WHM listips interface SEC-389...
CVE-2018-20952
CVE-2018-20952 affects cPanel prior to 68.0.27. The issue involves world-readable files created during use of the WHM Apache Includes Editor (SEC-388). The public description confirms the vulnerable state; no exploitation details are provided in the supplied documents. Remediation appears to be u...
CVE-2018-20952
cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor SEC-388...
CVE-2018-20951
cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config SEC-387...
CVE-2018-20951
CVE-2018-20951 affects cPanel prior to 68.0.27, enabling a self XSS in the WHM Spamd Startup Config. The vulnerability stems from insufficient validation of client-controlled data in the Startup Config, allowing execution of client-side code in some contexts. Affected software is cPanel/WHM (Spam...